Jump to content
Not connected, Your IP:


  • Content Count

  • Joined

  • Last visited

  • Days Won


Posts posted by go558a83nk

  1. use the latest AirVPN client and test different send and receive buffers in advanced settings.


    however, my guess is that your ISP is throttling openvpn connections.  try the SSL Tunnel (in protocol settings) as that should defeat their deep packet inspection


    I have Cable internet and my package is 325Mbps download / 20Mbps Upload and I get exactly that on speedtest.net


    However, when my airvpn is connected I get only 9Mbps-10Mbps download / 15Mbps - 19Mbps Upload


    I was going to use my old pc as a router or buy a DD-WRT router but if I'm going to lose that much speed there is no point. Can anyone confirm?



    Yes, I'm running the VPN on the router itself. 


    then this is the way you do it.




    This doesn't apply to me as I am using the Merlin Firmware and not Tomato.  It has a graphical section for port forwarding, which I have set up correctly as far as I can see, and no access to an iptables config.


    no, that is what you do.  SSH into the router and input the proper IPtables as that guide shows.


    the router GUI forwards ports from the WAN to LAN.  When connected to VPN you must forward ports from TUN to LAN.

  3. Has anyone got port forwarding to work successfully with this router and AirVPN?  I'm trying to set plex up, but it can't connect.  When I turn off the VPN, the ports are forwarded fine on my router and then in AirVPN I have the local port pointing to 32400 and I'm using the other port as what I'm specifyinng in Plex.  However, more importantly no matterwhat i try to set upi, plex or not, nothing seems to be connecting.  I always get error 111 when trying to check it. 


    just need to make sure....you are running VPN on the router?  the answer depends on that.

  4. performance depends on how fast your ISP line is.  There are several routers that have dual core CPU running 1000mhz or so.  They can do openvpn at 50mbit/s+


    if you want 200mbit/s speed then you'll need a pro router. but, chances are you'll struggle to get that anyway from any VPN provider.  (downloading at 200bit/s is 2/5 of a 1gbit/s server's bandwidth because your download is inbound and outbound for the server)

  5. found something interesting today.  With another VPN provider I use I can use the "mssfix 0" setting and no openvpn is detected.  Witch reports an MTU of 1500.


    But, with AirVPN the mssfix 0 setting does not disguise openvpn use and MTU is reported to be 1392.


    here is the VPN config of the other provider:

    proto udp
    mssfix 0
    dev tun
    ns-cert-type server
    key-direction 1
    auth SHA1
    cipher AES-256-CBC
    keysize 256
    verb 3
    script-security 2
    ping 6
    hand-window 20
    socket-flags TCP_NODELAY
    topology subnet
    route-metric 2

    That provider also claims to normalize IP packet TTL to prevent VPN detection by TTL analysis. 


    What could be the difference between the two VPN providers to cause this difference in result by witch?

  6. merlin firmware is going to best support the AC68 as it's based on asus stock firmware with optimizations and additions.


    for openvpn clients merlin firmware has policy based routing and can block VPN routed clients if the tunnel goes down.


    it's also extremely easy to install entware which allows you to install (on USB storage) many more linux packages.  you can even install stunnel so that you can use Air's openvpn through SSL tunnel option.  (openvpn through SSH requires no additional package install.)

  7. That warning about opening ports on your router is for if you are using the Eddie client on a computer.  Since you are using your router to run openvpn you do need to forward ports using the iptables you know of.


    Since it's not working something isn't yet correct.  Did you change the TUN device specified in the iptables to match that which your system uses for openvpn?  If not, use ifconfig at the SSH prompt to see (while openvpn is running).

  • Create New...